This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/jusKsFR2myH5y_SxmZdhc547TOU.roa File: jusKsFR2myH5y_SxmZdhc547TOU.roa (raw, json) Hash identifier: FjWKJu5eJdLGQtzzBBkYvevz1z9xR9jrxtDvXtKd9FQ= Subject key identifier: 8E:EB:0A:B0:54:76:9B:21:F9:CB:F4:B1:99:97:61:73:9E:3B:4C:E5 Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a Certificate serial: 019B7C12D7BEE7FF125795EFC9389BBF7806 Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/jusKsFR2myH5y_SxmZdhc547TOU.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2001:67c:1980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d7:be:e7:ff:12:57:95:ef:c9:38:9b:bf:78:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eeb0ab054769b21f9cbf4b1999761739e3b4ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:71:f0:65:35:a7:31:4e:eb:07:53:cb:0c: 95:5a:9c:2b:12:11:c5:eb:62:ce:fe:c3:91:1f:6d: ea:2e:72:5f:61:29:7b:b2:39:5c:48:e6:10:98:94: 09:3d:12:75:d5:be:a5:2f:73:3f:a4:86:60:51:50: c6:94:19:6b:14:cb:b7:02:ad:6f:ee:9e:16:cb:91: 83:ea:7d:8c:e8:9b:2e:0a:b9:a4:12:4a:28:a0:12: 2e:28:4e:2d:37:10:da:58:e9:05:5b:a4:62:92:e5: 08:0f:3b:27:e6:2c:1a:41:3d:96:4a:f4:42:cd:45: 71:f7:34:cc:3b:f0:51:34:9d:e8:b5:9f:0e:73:92: 39:37:21:70:09:6c:01:91:dc:5a:5f:6b:24:2f:76: cd:46:36:e2:41:5b:93:db:c2:6b:55:5a:6e:25:09: 2c:9f:31:a3:53:a0:84:be:59:43:59:17:25:17:e9: 81:24:e9:d6:e4:db:35:14:34:47:33:1a:d1:e3:c3: c6:50:ab:1b:06:74:98:5b:ec:a3:3a:30:7f:4c:d6: 60:f8:ef:5e:19:64:e1:20:ed:00:f9:f0:87:54:12: 2e:8b:da:9b:2c:f3:ba:e7:1e:98:2b:be:16:e3:a6: 96:e8:7f:96:32:f6:21:46:ca:49:f3:2d:2c:4f:b3: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EB:0A:B0:54:76:9B:21:F9:CB:F4:B1:99:97:61:73:9E:3B:4C:E5 X509v3 Authority Key Identifier: keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/jusKsFR2myH5y_SxmZdhc547TOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1980::/48 Signature Algorithm: sha256WithRSAEncryption 40:c2:8c:99:9f:68:d3:d2:86:3c:ea:36:dd:31:71:3b:b4:e6: d5:b5:e9:fe:f1:2d:4a:54:57:e9:70:93:3a:05:48:ed:64:a0: 72:58:23:ed:c8:4a:8f:64:48:94:87:aa:dc:f8:a9:7f:5b:ba: 1d:e3:60:10:ea:c4:d8:0c:0c:39:22:31:fe:d0:29:50:61:4a: 71:ea:3f:81:70:9c:75:f2:21:6f:40:a3:48:71:d6:a8:94:dd: cd:5c:74:0e:62:d3:7c:a8:0a:57:53:eb:b9:4d:18:13:8b:9a: 8e:b6:02:8e:29:0c:8f:30:9a:a2:77:d4:11:6a:94:03:bd:c5: 30:64:2e:c3:a9:32:1c:42:01:1b:0d:c4:b3:10:59:7a:00:6f: d5:96:8d:9b:ea:b3:8a:5d:81:ee:46:1e:1f:81:41:22:15:5a: 3a:89:11:a0:ae:a1:9e:14:36:62:87:79:41:59:75:34:11:42: 31:03:a8:68:3d:8d:a9:0d:fc:68:04:fe:ba:61:6d:83:1e:4c: 52:ac:01:50:62:c5:b6:5c:2c:34:d1:20:88:08:83:a6:4c:d9: 50:fb:1a:7a:49:82:54:3a:69:1a:e1:c7:ac:ef:27:96:6c:31: 14:11:2b:4c:a4:69:a8:26:7f:c6:49:5e:39:2a:1c:15:b7:ea: db:95:12:79 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Ete+5/8SV5XvyTibv3gGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGZkOTBkOTg3Mjk3Y2I1ZGQ0ZTA3YmU4NDBkMjgwZDFl MmNjNGEwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWViMGFiMDU0NzY5YjIxZjljYmY0YjE5OTk3NjE3MzllM2I0Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAZx8GU1pzFO6wdTywyVWpwrEhHF 62LO/sORH23qLnJfYSl7sjlcSOYQmJQJPRJ11b6lL3M/pIZgUVDGlBlrFMu3Aq1v 7p4Wy5GD6n2M6JsuCrmkEkoooBIuKE4tNxDaWOkFW6RikuUIDzsn5iwaQT2WSvRC zUVx9zTMO/BRNJ3otZ8Oc5I5NyFwCWwBkdxaX2skL3bNRjbiQVuT28JrVVpuJQks nzGjU6CEvllDWRclF+mBJOnW5Ns1FDRHMxrR48PGUKsbBnSYW+yjOjB/TNZg+O9e GWThIO0A+fCHVBIui9qbLPO65x6YK74W46aW6H+WMvYhRspJ8y0sT7NXFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI7rCrBUdpsh+cv0sZmXYXOeO0zlMB8GA1UdIwQY MBaAFF8P2Q2YcpfLXdTge+hA0oDR4sxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjIt N2JjZWZhOWY1OWU4LzEvanVzS3NGUjJteUg1eV9TeG1aZGhjNTQ3VE9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjItN2JjZWZhOWY1OWU4 LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBmA MA0GCSqGSIb3DQEBCwUAA4IBAQBAwoyZn2jT0oY86jbdMXE7tObVten+8S1KVFfp cJM6BUjtZKByWCPtyEqPZEiUh6rc+Kl/W7od42AQ6sTYDAw5IjH+0ClQYUpx6j+B cJx18iFvQKNIcdaolN3NXHQOYtN8qApXU+u5TRgTi5qOtgKOKQyPMJqid9QRapQD vcUwZC7DqTIcQgEbDcSzEFl6AG/Vlo2b6rOKXYHuRh4fgUEiFVo6iRGgrqGeFDZi h3lBWXU0EUIxA6hoPY2pDfxoBP66YW2DHkxSrAFQYsW2XCw00SCICIOmTNlQ+xp6 SYJUOmka4ces7yeWbDEUEStMpGmoJn/GSV45KhwVt+rblRJ5 -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:05 2026 by rpki-client